Here, we don't talk about the product itself, as a whole. We talk about its kernel.

Sure thing, if I don't have access to the kernel, then it's all irrelevant. We only consider the cases when the device is actually hackable (despite whatever its vendor says).